1. Who We Are

Asterion LLC ("Asterion," "we," "us," or "our") is a Dayforce consulting firm based in Salt Lake City, Utah, United States, providing services to clients across the United States, Canada, and Europe. This Privacy Policy explains how we handle personal information you provide through our website at asterionllc.io and related contact channels.

2. Information We Collect

We collect only what we need to respond to inquiries and deliver services. Specifically:

2.1 Information you provide to us directly

• Consultation and quote forms: name, company name, work email, phone number (optional), preferred contact method, the service area you're asking about, and the description you provide of your Dayforce environment or project.
• Guide request form: name, company name, work email, whether you opted in to occasional marketing emails, the time of your request and the page you came from. We keep a record of the consent text you agreed to. Submissions are stored in the form service of our website host (Netlify) and are used to deliver the guide and, only if you opted in, to send occasional updates.
• Email and phone contact: if you reach out to us at info@asterionllc.io or by phone, we receive whatever information you choose to share in that communication.
• Booking a consultation: when you click a "Schedule Consultation" link, you are redirected to Microsoft Bookings (operated by Microsoft Corporation). The information you provide there is collected and processed by Microsoft under its own privacy terms; we receive only the meeting details Microsoft passes back to us.

2.2 Information collected automatically

• Server logs: like most websites, our hosting infrastructure may record standard request information such as IP address, browser type, referring URL, and timestamps. These logs are used for security, debugging, and operational purposes.
• Session storage: we use a small amount of browser session storage to remember whether you have dismissed the mobile call-to-action banner. This is non-identifying and is cleared when you close your browser.
• No third-party analytics and no advertising trackers are set by Asterion on this site. The only cookies we set are the sign-in cookies of the Dayforce Report Library, described in section 2.5, and only after you choose to sign in to it. The library keeps its own usage records, also described in section 2.5. If we add analytics or advertising tools in the future, we will update this policy and, where required, obtain consent.

2.3 Information we do not collect

• We do not knowingly collect information from children under 16.
• We do not collect special categories of personal data (such as health, biometric, or government identifier data) through this website.
• We do not sell personal information.

2.4 Asterion Connect (our Excel add-in)

Asterion Connect is a free Microsoft Excel add-in that builds Dayforce-compatible XML import files from your spreadsheet data. It is designed to keep your data private:

• Your spreadsheet and employee data never leave Excel. The add-in builds, validates, and delivers the import XML entirely on your own device and provides it to you by local download. This content is never transmitted to Asterion or to any server.
• The add-in collects nothing. Asterion Connect has no sign-in, no account, and no contact form. It does not transmit your spreadsheet contents, the import files it produces, your identity, or any usage or analytics data to Asterion or to any third party. We receive no personal information from the add-in at all.
• The only network requests it makes are to download its own program files and the Dayforce import schemas it validates against, from Asterion’s static hosting. These requests carry no information about you or your workbook, in the same way that loading a web page does not send the contents of your computer. Once loaded, the add-in works with no internet connection.
• Your preferences stay on your device. Settings such as which tips you have dismissed, your saved import templates, and any licence key you enter are stored in your browser’s local storage on your own machine. They are never transmitted, and you can clear them at any time.

2.5 Dayforce Report Library

The Dayforce Report Library at asterionllc.io/library is a searchable collection of Dayforce reports and SQL shared by members of the Dayforce User Group. Asterion hosts and provides it. Depending on how you sign in, we collect the following:

• Group members (Sign in with Basecamp): your Basecamp person ID and display name, the company name shown on your Basecamp profile, and the dates of your first and most recent sign-in. During sign-in we check, once, that you belong to the Dayforce User Group project and whether your Basecamp email address ends in @asterionllc.io. We do not store your email address or your Basecamp access token; both are discarded as soon as that check is done.
• Guests (email sign-up): your name, email address and company, whether you left the box ticked to receive occasional emails from Asterion LLC, and the time and wording version of the consent you gave. To confirm your address we email you a six-digit code; we keep only a scrambled (hashed) copy of it, and it expires after a short time.
• Items collected from Basecamp: reports and SQL that members have posted in the Dayforce User Group Basecamp project are copied into the library with the author's name and linked back to the original post.
• Things you add: items you submit (title, description, SQL or .dat file, modules and field names) are stored with your name as the author. Guest submissions are linked to your guest record so an Asterion admin can review them.
• Search logs: the words you search for, the filters and page size you chose, the results shown and the result you opened, together with whether you were signed in as a member or a guest and your library user ID (your Basecamp person ID, or the ID of your guest record). Search logs do not record your name or email address. Search text is stored as you typed it and may be seen by Asterion admins, so please do not type personal information into the search box. We use search logs to improve search and to decide which features to build next.
• Usage analytics: we record your activity in the library, per person: when you sign in, search, open an item, copy SQL, download a file, submit an item or add field names. Each record holds the time, your library user ID, your company and the item involved. We use these records for service analytics, to see how many companies and people use the library, whether they come back, and what they reuse. We also use them for aggregated reporting to our business partners. Partner reports show company names with counts, never an individual's name, email address, user ID or activity. Activity by Asterion staff is marked so it can be left out of the figures.
• Cookies: a sign-in cookie (lib_session, kept for up to 30 days and removed when you sign out) and, only while you sign in with Basecamp, a short-lived security cookie (lib_oauth_state, 10 minutes). Both are strictly necessary for signing in and are not used for tracking.
• Service providers for the library: Netlify (website hosting), Supabase (database and file storage; the library's data is hosted in Canada, in the ca-central-1 region), Resend (sends the sign-in code email; processed in the United States), Anthropic (summarises and tags library items, and reads SQL from screenshots; it receives the item text and the screenshots posted in SQL discussions) and 37signals (Basecamp sign-in).

Unsubscribing and deleting your library data: marketing emails come from Asterion LLC, and every one includes an unsubscribe link. You can also email info@asterionllc.io with the subject "Library privacy request" to stop marketing emails, correct your details, or have your library record deleted (guests and members alike). Deleting it also removes your activity records and, if you ask, items you submitted. We respond within 30 days. We keep library records until you ask us to delete them or until the library is shut down. Members can hide any of their items from guests at any time from My contributions, and anyone can ask us to remove an item they shared.

3. How We Use Information

We use the information you provide to:

• Respond to your inquiry and prepare a tailored quote or consultation agenda.
• Schedule and conduct consultations and follow-up communications.
• Deliver, support, and improve the consulting services you engage us for.
• Send occasional follow-up communications about your inquiry or active engagement. We do not add you to a marketing mailing list without your consent.
• Comply with legal obligations and enforce our agreements.

4. How We Share Information

We share personal information only as needed to operate the business. Specifically:

• Service providers: we use trusted vendors to host our website, process form submissions, and schedule meetings (for example, Microsoft for Outlook Bookings). These providers process information on our behalf under contractual privacy and security obligations.
• Legal compliance: we may disclose information if required by applicable law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.
• Business transfers: if Asterion is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. You will be notified of any such transfer and any resulting changes to this policy.
• We do not sell or rent your personal information to third parties for their own marketing or advertising purposes.

5. Data Retention

We retain personal information only as long as is reasonably necessary for the purposes for which it was collected, including to respond to your inquiry, perform contracted services, comply with legal and tax obligations, and resolve disputes. Inquiry data from prospects who do not become clients is typically deleted within 24 months of last contact, unless you ask us to keep it longer or applicable law requires a longer retention. Dayforce Report Library records are kept until you ask us to delete them (see section 2.5) or until the library is shut down.

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. No method of transmission over the internet or electronic storage is fully secure, however, and we cannot guarantee absolute security. If we ever become aware of a security incident affecting your personal information, we will notify you and the appropriate regulators as required by law.

7. International Data Transfers

Asterion is based in the United States. If you are located in Canada, the European Economic Area, the United Kingdom, or another jurisdiction outside the United States, your personal information will be transferred to, stored, and processed in the United States, with one exception: the Dayforce Report Library's database and files are stored in Canada (Supabase, ca-central-1). Our website host (Netlify) and the service that sends the library's sign-in emails (Resend) process data in the United States, and the library's item summaries are generated by Anthropic, so some library information may be handled outside Canada. Where required by applicable law (including the GDPR and UK GDPR), we rely on appropriate transfer mechanisms — such as Standard Contractual Clauses and supplemental safeguards — to protect transferred data.

8. Your Rights

Depending on where you are located, you may have the following rights with respect to your personal information:

8.1 Rights for European Economic Area, United Kingdom, and Switzerland residents (GDPR / UK GDPR)

• Right to access, correct, or delete the personal information we hold about you.
• Right to restrict or object to certain processing.
• Right to data portability.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with your local data protection authority.

The legal bases on which we process your information are typically: (a) your consent, (b) the performance of a contract with you, (c) compliance with a legal obligation, or (d) our legitimate interests in operating and improving our business, where those interests are not overridden by your rights.

8.2 Rights for California residents (CCPA / CPRA)

• Right to know what personal information we collect, use, disclose, and (if applicable) sell or share.
• Right to request deletion of personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to limit the use and disclosure of sensitive personal information (we do not currently collect categories that would trigger this right through this website).
• Right to non-discrimination for exercising any of these rights.

Asterion does not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.

8.3 Rights for Canadian residents (PIPEDA and provincial laws)

• Right to access the personal information we hold about you.
• Right to challenge the accuracy and completeness of that information and have it amended as appropriate.
• Right to withdraw consent, subject to legal and contractual restrictions.
• Right to file a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

8.4 How to exercise your rights

To exercise any of these rights, email us at info@asterionllc.io with the subject line "Privacy Request." We will respond within the time period required by applicable law (typically 30 days for GDPR requests and 45 days for CCPA requests, with possible extensions). We may need to verify your identity before fulfilling certain requests.

9. Children's Privacy

Our website and services are intended for business professionals and are not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Third-Party Links

Our website contains links to third-party services we rely on, such as Microsoft Bookings, LinkedIn, and our hosting provider. Once you leave our site, this Privacy Policy no longer applies. We encourage you to read the privacy policy of any third-party service you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material, we will provide a more prominent notice (for example, by email or via a homepage banner). Your continued use of our website after the effective date of the revised policy constitutes your acceptance of the changes.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, you can reach us at:

• Email: info@asterionllc.io
• Phone: (801) 859-8696
• Mail: Asterion LLC, Salt Lake City, UT, United States

This Privacy Policy is provided for general informational purposes and reflects our current data practices. It is not legal advice. If you have questions about how it applies to your situation, please consult qualified counsel.